The Core Is Where
Guarantees Are Made or Broken.

Handles device registration, authentication (5G-AKA or EAP-TLS), mobility tracking, and handover signalling. Supports up to 100,000 registered UEs per AMF instance. Clustered for 99.999% availability with automatic failover.

SMF manages PDU session establishment and selects the UPF based on slice type and application. Local UPF provides N6 data breakout on-site — SCADA, AGV, and camera traffic never leaves your facility. Multiple dedicated UPFs for per-slice isolation.

PCF enforces per-device QoS policies — QCI, ARP, GBR/MBR, preemption capability. UDM stores subscriber profiles and authorised slice lists. HCT configures policies per device class: robots get URLLC QCI 82, cameras get eMBB QCI 2.

Routes each UE connection to the correct network slice based on S-NSSAI subscription. Ensures an IoT sensor connects to the mMTC slice, a robot to the URLLC slice, and a security camera to the eMBB slice — automatically, on every connection.

Security Edge Protection Proxy protects inter-PLMN signalling. For sovereign deployments requiring interconnection with national carrier cores (e.g., for roaming in/out of site), N32 JOSE encryption ensures zero signalling exposure on transit.

All 5GC functions deployed as containerised network functions (CNF) on Kubernetes — on-premise using Intel Xeon servers. Zero-downtime upgrades via rolling deployment. HCT manages the K8s cluster, CNF lifecycle, and 5GC configuration via GitOps.